You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/networking/working-remotely-support.md
+25-22Lines changed: 25 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
2
title: 'Working remotely using Azure networking services'
3
-
description: This page describes how you can use Azure networking services that are available to enable working remotely and how to mitigate traffic issues resulting from increased number of people working from home due to the COVID-19 crisis.
3
+
description: This page describes how you can use Azure networking services that are available to enable working remotely and how to mitigate traffic issues resulting from increased number of people working remotely.
4
4
services: networking
5
5
author: rambk
6
6
@@ -13,19 +13,22 @@ ms.author: rambala
13
13
14
14
# Working remotely using Azure networking services
15
15
16
-
This article describes how you can leverage Azure networking services to enable working remotely. Covid-19 is creating a need for organizations to support more remote workers. As a result, network architects are faced with the following challenges:
16
+
>[!NOTE]
17
+
> This article describes how you can leverage Azure networking services, Microsoft network, and the Azure partner ecosystem to work remotely and mitigate network issues that you might be facing because of the COVID-19 crisis.
17
18
18
-
- address an increased in network utilization
19
-
- provide reliable-secure connectivity to more employees of their company and customers,
20
-
- provide connectivity to remote locations across the globe.
19
+
This article describes the options that are available to organizations to set up remote access for their users or to supplement their existing solutions with additional capacity during periods of peak utilization. Network architects are faced with the following challenges:
21
20
22
-
Not all networks (for example, the Internet backbone, private WAN, and corporate core networks) are experiencing congestion because of Covid-19. The bottlenecks are commonly reported only in home broadband networks and VPN gateways of on-premises networks of corporations.
21
+
- Address an increase in network utilization.
22
+
- Provide reliable-secure connectivity to more employees of their company and customers.
23
+
- Provide connectivity to remote locations across the globe.
24
+
25
+
Not all networks (for example, private WAN and corporate core networks) experience congestion from peak remote worker load. The bottlenecks are commonly reported only in home broadband networks and VPN gateways of on-premises networks of corporations.
23
26
24
27
Network planners can help ease the bottlenecks and alleviate the network congestion by keeping in mind that different traffic types need different network treatment priorities and by some smart load redirection/distribution. For example, real-time tele-medecine traffic of doctor-patient interaction is of high importance and delay/jitter sensitive. Whereas, replication of the same traffic between storages is not delay sensitive. The former traffic must be routed via the most optimal network path with higher quality of service; whereas it is acceptable to route the later traffic via sub-optimal route.
25
28
26
29
>[!NOTE]
27
-
>Towards the end of this article, links for Covid-19 preparation articles leveraging different Azure networking features and ecosystems are listed.
28
-
>
30
+
>Towards the end of this article, links to articles leveraging different Azure networking features and ecosystems to support users working remotely are listed.
31
+
29
32
30
33
## Sharing our best practices - Azure network is designed for elasticity and high-availability
31
34
@@ -43,47 +46,47 @@ Azure scalable VPN gateway support both Point-to-Site (P2S) and Site-to-Site (S2
43
46
44
47
If you are using SSTP, the number of concurrent connections would be limited to 128. To overcome the 128 connections limitation, we suggest transitioning to OpenVPN or IKEv2. For more information, see [Transition to OpenVPN protocol or IKEv2 from SSTP](https://go.microsoft.com/fwlink/?linkid=2124112).
45
48
46
-
To access your resources deployed in Azure, remote employees could use Azure Bastion solution, instead of VPN connection. For more information, see [Azure Bastion COVID-19 update](https://go.microsoft.com/fwlink/?linkid=2123939).
49
+
To access your resources deployed in Azure, remote developers could use Azure Bastion solution, instead of VPN connection to get secure shell access (RDP or SSH) without requiring public IPs on the VMs being accessed. For more information, see [Work remotely using Azure Bastion](https://go.microsoft.com/fwlink/?linkid=2123939).
47
50
48
-
For aggregating large-scale VPN connection, to support any-to-any connections between resources in different on-prem global locations, in different regional hub and spoke virtual networks, and to optimize utilization of multiple home broadband networks you can use Azure Virtual WAN. For more information, see [Struggling to cater to work from home needs? Here is where Azure Virtual WAN can help](https://go.microsoft.com/fwlink/?linkid=2123769).
51
+
For aggregating large-scale VPN connection, to support any-to-any connections between resources in different on-premises global locations, in different regional hub and spoke virtual networks, and to optimize utilization of multiple home broadband networks you can use Azure Virtual WAN. For more information, see [Struggling to cater to work from home needs? Here is where Azure Virtual WAN can help](https://go.microsoft.com/fwlink/?linkid=2123769).
49
52
50
53
Another way to support a remote workforce is to deploy a Virtual Desktop Infrastructure (VDI) hosted in your Azure virtual network, secured with an Azure Firewall. For example, Windows Virtual Desktop (WVD) is a desktop and app virtualization service that runs in Azure. With Windows Virtual Desktop, you can set up a scalable and flexible environment in your Azure subscription without the need to run any additional gateway servers. You are only responsible for the WVD virtual machines in your virtual network. For more information, see [Azure Firewall remote work support](../firewall/remote-work-support.md).
51
54
52
-
Azure also has a rich set of eco system partners. Our partners Network Virtual Appliances on Azure can also help scale VPN connectivity. For more information, see [Network Virtual Appliance (NVA) Considerations during COVID-19](https://go.microsoft.com/fwlink/?linkid=2123771).
55
+
Azure also has a rich set of eco system partners. Our partners Network Virtual Appliances on Azure can also help scale VPN connectivity. For more information, see [Network Virtual Appliance (NVA) considerations for remote work](https://go.microsoft.com/fwlink/?linkid=2123771).
53
56
54
57
## Extend employees' connection to access globally distributed resources
55
58
56
59
The following Azure services can be leveraged to enable employees connected to Azure to access your globally distributed resources. Your resources could be in any of the Azure regions, on-premises networks across the globe, or even in other public or private clouds. Microsoft support for multi-cloud traffic is discussed later in this article.
57
60
58
-
Azure VNet-peering: If you deploy your resources in more than one Azure regions and/or if you aggregate the connectivity of remotely working employees using multiple virtual networks (VNet), you can establish cross connectivity between the multiple Azure Vnets using virtual network peering. For more information, see [Virtual network peering][VNet-peer].
61
+
-**Azure virtual network peering**: If you deploy your resources in more than one Azure regions and/or if you aggregate the connectivity of remotely working employees using multiple virtual networks, you can establish cross connectivity between the multiple Azure virtual networks using virtual network peering. For more information, see [Virtual network peering][VNet-peer].
59
62
60
-
Azure VPN-based solution: For your remote employees connected to Azure via P2S or S2S VPN, you can enable access to on-premises networks by configuring S2S VPN between your on-premises networks and Azure VPN gateway. For more information, see [Create a Site-to-Site connection][S2S].
63
+
-**Azure VPN-based solution**: For your remote employees connected to Azure via P2S or S2S VPN, you can enable access to on-premises networks by configuring S2S VPN between your on-premises networks and Azure VPN gateway. For more information, see [Create a Site-to-Site connection][S2S].
61
64
62
-
ExpressRoute: Using ExpressRoute private peering you can enable private connectivity between your Azure deployments and infrastructure that's on your premises or in a colocation facility. ExpressRoute, via Microsoft peering, also permits accessing public endpoints in Microsoft from your on-premises network. ExpressRoute connections do not go over the public Internet. They offer secure connectivity, reliability, higher throughput, with lower and consistent latencies than typical connections over the Internet. For more information, see [ExpressRoute overview][ExR]. Leveraging your existing network provider that is already part of our [ExpressRoute partner ecosystem][ExR-eco] can help reduce the time to get large bandwidth connections to Microsoft. Using [ExpressRoute Direct][ExR-D] you can directly connect your on-premises network to Microsoft backbone. ExpressRoute Direct offers two different line-rate options of dual 10 Gbps or 100 Gbps.
65
+
-**ExpressRoute**: Using ExpressRoute private peering you can enable private connectivity between your Azure deployments and on-premises infrastructure or your infrastructure in a co-location facility. ExpressRoute, via Microsoft peering, also permits accessing public endpoints in Microsoft from your on-premises network. ExpressRoute connections do not go over the public Internet. They offer secure connectivity, reliability, higher throughput, with lower and consistent latencies than typical connections over the Internet. For more information, see [ExpressRoute overview][ExR]. Leveraging your existing network provider that is already part of our [ExpressRoute partner ecosystem][ExR-eco] can help reduce the time to get large bandwidth connections to Microsoft. Using [ExpressRoute Direct][ExR-D] you can directly connect your on-premises network to the Microsoft backbone. ExpressRoute Direct offers two different line-rate options of dual 10 Gbps or 100 Gbps.
63
66
64
-
Azure Virtual WAN: Azure Virtual WAN allows seemless interoperability between your VPN connections and ExpressRoute circuits. As mentioned earlier, Azure Virtual WAN also support any-to-any connections between resources in different on-prem global locations, in different regional hub and spoke virtual networks
67
+
-**Azure Virtual WAN**: Azure Virtual WAN allows seamless interoperability between your VPN connections and ExpressRoute circuits. As mentioned earlier, Azure Virtual WAN also support any-to-any connections between resources in different on-prem global locations, in different regional hub and spoke virtual networks
65
68
66
69
## Scale customer connectivity to frontend resources
67
70
68
-
Covid-19 is also creating a need for people to go online more. Even those who are not used to online transactions are now forced to do so. This results in increased customer traffic to many corporate websites Azure Application Gateway can help managing this increased frontend workload. For more information, see [Application Gateway COVID-19 Update](https://go.microsoft.com/fwlink/?linkid=2123940).
71
+
During times when more people go online, many corporate websites experience increased customer traffic. Azure Application Gateway can help manage this increased frontend workload. For more information, see [Application Gateway high traffic support](https://go.microsoft.com/fwlink/?linkid=2123940).
69
72
70
73
## Microsoft support for multi-cloud traffic
71
74
72
-
Even for your deployments in other public clouds, Microsoft can provide global connectivity. Azure Virtual WAN, VPN or ExpressRoute can help in this regard. To extend connectivity from Azure to other clouds, you can configure S2S VPN between the two clouds. You can also establish connectivity from Azure to other public clouds using ExpressRoute. Oracle cloud is part of ExpressRoute partner ecosystem. So you can [set up a direct interconnection between Azure and Oracle Cloud Infrastructure][Az-OCI]. Most service providers, who are part of ExpressRoute partner ecosystem, also offer private connectivity to other public clouds like Amazon's AWS and Google's GCP. Leveraging these service providers, you can establish private connectivity between your deployments in Azure and AWS/GCP via ExpressRoute.
75
+
For your deployments in other public clouds, Microsoft can provide global connectivity. Azure Virtual WAN, VPN or ExpressRoute can help in this regard. To extend connectivity from Azure to other clouds, you can configure S2S VPN between the two clouds. You can also establish connectivity from Azure to other public clouds using ExpressRoute. Oracle cloud is part of ExpressRoute partner ecosystem. You can [set up a direct interconnection between Azure and Oracle Cloud Infrastructure][Az-OCI]. Most service providers that are part of the ExpressRoute partner ecosystem also offer private connectivity to other public clouds. Leveraging these service providers, you can establish private connectivity between your deployments in Azure and other clouds via ExpressRoute.
73
76
74
77
## Next steps
75
78
76
-
Following are the Covid-19 preparation articles leveraging different Azure networking features:
79
+
The following articles discuss how different Azure networking features can be used to scale users to work remotely:
77
80
78
81
|**Article**|**Last update**|
79
82
| --- | --- |
80
83
|[How to enable users to work remotely](https://go.microsoft.com/fwlink/?linkid=2123770)| March 23, 2020 |
81
84
|[Struggling to cater to work from home needs? Here is where Azure Virtual WAN can help](https://go.microsoft.com/fwlink/?linkid=2123769)| March 23, 2020 |
82
-
|[Application Gateway COVID-19 update](https://go.microsoft.com/fwlink/?linkid=2123940)| March 23, 2020 |
83
-
|[Network Virtual Appliance (NVA) considerations during COVID-19](https://go.microsoft.com/fwlink/?linkid=2123771)| March 23, 2020 |
85
+
|[Application Gateway high traffic support](https://go.microsoft.com/fwlink/?linkid=2123940)| March 23, 2020 |
86
+
|[Network Virtual Appliance (NVA) considerations for remote work](https://go.microsoft.com/fwlink/?linkid=2123771)| March 23, 2020 |
84
87
|[Transition to OpenVPN protocol or IKEv2 from SSTP](https://go.microsoft.com/fwlink/?linkid=2124112)| March 23, 2020 |
85
-
|[Azure Bastion COVID-19 update](https://go.microsoft.com/fwlink/?linkid=2123939)| March 23, 2020 |
86
-
|[COVID update - ExpressRoute](https://go.microsoft.com/fwlink/?linkid=2123768)| March 23, 2020 |
88
+
|[Working remotely using Azure Bastion](https://go.microsoft.com/fwlink/?linkid=2123939)| March 23, 2020 |
89
+
|[Using Azure ExpressRoute to create hybrid connectivity to support remote users](https://go.microsoft.com/fwlink/?linkid=2123768)| March 23, 2020 |
87
90
|[Azure Firewall remote work support](../firewall/remote-work-support.md)|March 25, 2020|
0 commit comments